Regulatory watch for EU asset managers

This creates an immediate operational reporting requirement for Luxembourg fund structures and their managers. Procedures and escalation playbooks for liquidity events should reflect the new eDesk notification route from 21 September 2026.

Luxembourg ManCos/AIFMs using the affected Cisco product need immediate technical triage and, if compromised, regulatory incident assessment and notification. The communication directly links vulnerability exploitation to major ICT incident reporting obligations.

Asset managers with crypto exposure, crypto-related counterparties or CASP relationships should expect increasing supervisory attention to crypto ML/TF risks and stronger analytical expectations. The signal is directional rather than a new binding requirement.

The issues map closely to DORA and asset-management third-party risk: ICT concentration, subcontracting chains, exit and substitution, resilience testing and visibility over critical providers.

Although aimed at FMIs, the toolkit addresses cyber and operational-resilience practices that are highly relevant to asset managers under DORA, particularly governance, scenario design, recovery and resilience testing.

The report can inform transaction-monitoring scenarios, geographic and counterparty risk assessments, and broader understanding of sophisticated laundering networks.

The API is operationally useful for fund-data workflows and may improve automated verification or enrichment of regulatory and reference data used by asset managers and service providers.

This creates an immediate procedural requirement for Luxembourg AIFMs and UCITS ManCos using EU passports and affects regulatory filings and cross-border operating processes.

The Rulebook is a primary operational source for Irish AIF structures and managers and changes can have direct implications for product governance, documentation and ongoing compliance.

This is a direct Luxembourg supervisory signal on the organisation and effectiveness of the risk management function and should inform governance, staffing and control-framework reviews.

Delegation is central to the European asset-management operating model, and the findings provide a concrete benchmark for substance, retained responsibility and delegate oversight.

This is relevant for asset managers investing in or interacting with DeFi ecosystems, especially where portfolio exposure creates additional counterparty, governance or AML risk.

Relevant for asset managers exposed to crypto-assets, VASPs or counterparties operating in the digital-asset ecosystem, particularly for AML risk assessment and due diligence.

This is not directly targeted at financial-sector asset managers, but it may be useful for understanding AMLA's broader supervisory methodology and risk-classification approach.

Asset managers increasingly rely on cross-entity and cross-sector information to identify financial-crime risk; the report is relevant to the design of information-sharing arrangements and their governance constraints.

EU fund managers should expect coordinated supervisory scrutiny of the independence, expertise and effectiveness of their risk management function and related governance arrangements.

This could materially affect how asset managers structure, document and potentially automate suspicion reporting to FIUs under the future EU AML framework.

Together with the ESMA and AMF findings, this gives a useful cross-jurisdiction benchmark for second- and third-line governance in EU fund managers.

Changes to FATF standards can flow into EU AML rules, national risk assessments, supervisory guidance and firms' own risk-based approaches, so material updates are relevant even before domestic implementation.

Although broader than asset management, the publication is useful context for fund-manager risk assessments, stress scenarios and supervisory priorities in France.

Luxembourg financial-sector entities, including relevant asset managers, may need to provide data used to assess eligibility for future direct AMLA supervision and should understand the selection logic and reporting requirements.

While more directly relevant to payment institutions and banks, it is relevant to asset managers' payment controls, AML operations and reliance on payment-chain data.

The change can affect sanctions and terrorist-financing control frameworks and is relevant to firms dealing with higher-risk jurisdictions, sanctions screening and humanitarian-exemption scenarios.

Plenary outcomes are a key upstream source for future AML/CFT standards, jurisdiction-risk treatment and regulatory developments that can flow into EU and national frameworks.

Jurisdictional FATF status is an important input into geographic risk assessment, customer and investor due diligence, transaction monitoring and enhanced due diligence frameworks.

Understanding supervisors’ use of data and technology helps anticipate how regulatory reporting, surveillance and supervisory interaction may evolve for asset managers.

The communication is a useful benchmark for customer acceptance and risk-appetite frameworks, especially where asset managers apply enhanced due diligence or consider exiting higher-risk relationships.

This is one of the most concrete 2026 AML/CFT benchmarks for French asset managers because it shows exactly which deficiencies have generated supervisory follow-up or enforcement.

Directly relevant to MMF liquidity-risk management, supervisory expectations and the calibration of weekly liquid-asset buffers for Luxembourg MMFs.

Valuation of illiquid assets is a stated 2026 supervisory priority and the report gives Luxembourg IFMs a concrete supervisory benchmark for policies, governance and controls.

The Guidelines are directly relevant to KYC refresh, ongoing due diligence and transaction/activity monitoring arrangements of obliged asset management entities.

Valuation is a major 2026 supervisory theme for asset managers, and IOSCO's recommendations are likely to influence national supervisory expectations and industry benchmarks.

The notice confirms national supervisory application of the ESMA MMF stress-testing framework for Irish-regulated money market funds and their managers.

French MMF managers must reflect the updated parameters in their stress-testing framework and related risk-management processes.

This signals how the harmonised EU LMT framework will be embedded in French supervisory expectations and fund-manager procedures.

The findings provide a concrete EU supervisory benchmark for ManCo/AIFM compliance and internal audit frameworks and are likely to feed national supervisory follow-up.

This is a clear national implementation signal for Irish UCITS and AIFs and is useful for comparing how EU NCAs operationalise the same ESMA framework.

The rules form part of the professional-conduct framework for French asset management and may affect internal policies, ethics standards and compliance controls.

MMF managers must incorporate prescribed stress scenarios into their risk-management processes; the proposed change affects both methodology and how annual parameter updates are operationally maintained.

This could materially reshape fund-manager regulatory reporting, data architecture and operational processes across AIFMD and UCITS.

This is directly relevant to French asset managers because it affects how they interact with the supervisor and how supervisory expectations may be communicated and implemented.

This is especially relevant for cross-border asset managers and groups that centralise AML controls or operate through branches, subsidiaries and shared-service arrangements.

Business-wide AML/CFT risk assessment is a core control for asset managers and the Guidelines may materially influence future methodology, documentation and governance expectations under the AMLR.

This turns the AIFMD II liquidity framework into an operational supervisory process and is therefore directly relevant to incident procedures, reporting governance and evidence trails.

The work provides evidence on how a major EU fund domicile expects LMTs to be used in practice and links fund-level liquidity tools to wider financial-stability objectives.

This is a direct map of where Luxembourg fund managers can expect supervisory attention in 2026 and therefore a useful benchmark for risk assessments, control plans and governance agendas.

The review provides granular supervisory expectations on the organisation, independence and effectiveness of second- and third-line control functions in asset management firms.

This creates a concrete documentation expectation linking DORA governance to the regulatory programme of activity of French asset managers.

This is a direct operational implementation requirement for Luxembourg ManCos/AIFMs and open-ended funds, with implications for fund documentation, governance, procedures and reporting.

These Guidelines are a core 2026 implementation text for open-ended EU funds and establish supervisory expectations that national regulators such as AMF and CBI have subsequently adopted or signalled they will apply.

This is one of the clearest annual statements of supervisory priorities for a major EU fund domicile and provides a useful benchmark for ManCo/AIFM control plans and risk assessments.

The RTS is directly relevant to UCITS management companies and the design, selection, documentation and operational use of liquidity management tools.

The RTS is directly relevant to AIFMs managing open-ended AIFs and the operational implementation, documentation and governance of liquidity management tools.

This is a concrete implementation measure for Irish AIFMs, UCITS and AIFs adapting fund documentation and permissions to the revised AIFMD framework.

The RTS gives early visibility on how AML/CFT enforcement severity may become more harmonised across Member States and therefore informs compliance-risk and regulatory-risk assessments.

This is foundational for future EU-wide KYC/CDD operating models and will directly affect onboarding, verification, beneficial ownership and evidence requirements for obliged asset-management entities.

The RTS may affect when customer due diligence obligations are triggered and how related transactions are aggregated or classified under the future EU AML framework.

The findings give French SGPs a concrete benchmark for operational-risk frameworks and interact closely with broader DORA and governance expectations.

The programme helps anticipate the international policy themes likely to influence future EU and national asset-management supervision.

Although not targeted specifically at fund managers, the assessment is relevant to Luxembourg AML/CFT risk methodology, TCSP-related exposures and broader supervisory expectations on ML/TF/PF risk assessment.

This provides a direct view of where French asset managers should expect supervisory attention during 2026 and is useful for control plans and risk-based compliance priorities.